Post #4256634

It's 2026 and CISA just had to publish a federal alert whose entire message is: please, we are begging you, stop leaving your water treatment PLCs on the open fucking internet with the default password still set. https://www.cisa.gov/news-events/alerts/2026/07/30/cisa-urges-water-and-wastewater-systems-sector-protect-ot-against-activity-targeting-plcs That's the whole advisory. Attackers are changing the IPs so operators can't reach their own gear, and cities are catching boil-water notices over it. US critical infra security is duct tape, prayer, and a Shodan search nobody in charge has ever bothered to run. Some things never change... SMH